Episode

FLOSS 854: The Big Daddy Core

Podcast: FLOSS Weekly
Published: Nov 12, 2025
Duration seconds: 3640
Processing state: processed
Canonical source: https://b27a1a7a-dbb9-4922-ac3e-601e2d6ca1e1.libsyn.com/floss-854-the-big-daddy-core
Audio: https://traffic.libsyn.com/secure/b27a1a7a-dbb9-4922-ac3e-601e2d6ca1e1/FLOSS-854.mp3?dest-id=4272468
JSON: /v1/public/podcasts/floss-weekly/episodes/floss-854-the-big-daddy-core
Markdown: /podcast/floss-weekly/floss-854-the-big-daddy-core.md

Actions

POST https://stenobird.com/v1/public/podcasts/floss-weekly/episodes/floss-854-the-big-daddy-core/transcription-requests
Idempotently request low-priority transcript generation for this episode.
GET https://stenobird.com/podcast/floss-weekly/floss-854-the-big-daddy-core.md
Read the agent-friendly Markdown representation of this episode resource.

Summary

Ochre and Atym.io bring cloud-native containerization to resource-constrained embedded systems using WebAssembly. This approach allows developers to run modular, isolated workloads on everything from Linux to Zephyr-based MCUs.

Topics

WebAssembly
Embedded Systems
Containerization
Zephyr OS
IoT Security
Microcontrollers
Cloud Native
Ochre VM

Highlights

Main idea: Ochre acts as a lightweight WebAssembly VM that enables 'Docker on a diet' for embedded hardware
Practical takeaway: Developers can lift and shift existing C code into containers to gain memory protection without a full rewrite
Failure mode: Traditional Docker is too heavy for MCUs, requiring a much smaller footprint for low-memory environments
Practical takeaway: Modular containers allow for updating specific drivers or features without needing to recertify the entire device firmware
Main idea: The technology enables 'Software Defined IoT' by decoupling hardware-specific firmware from application logic

Chapters

1:00 Introduction to Ochre and Atym.io: The hosts introduce Jason Shepherd to discuss the intersection of WebAssembly, containers, and embedded systems.
6:00 The Vision for Cloud-Native Embedded: Jason explains how Atym.io brings cloud-native principles and continuous delivery to the embedded space using the Apache 2.0 licensed Ochre.
10:25 Overcoming the Overhead of Docker: A discussion on why traditional container runtimes are too resource-intensive for devices with limited RAM and the benefits of WebAssembly.
15:20 Targeting Low-Power MCUs: Exploring the use case for running containers on modern microcontrollers with very small memory footprints.
19:55 Security and Certification Benefits: How containerization helps manage the Cyber Resilience Act and allows for updating code without re-certifying the entire firmware stack.
24:30 Ahead-of-Time Compilation: Details on how Atym.io provides AOT compilation to translate WebAssembly into native instructions for specific hardware.
29:00 Software Defined IoT: The emergence of SD-IoT and the security advantages of using WebAssembly to mitigate C-based memory vulnerabilities.
47:20 The Future of Embedded Networking: Discussing the path forward for software-defined networking and the integration of WebAssembly into the broader ecosystem.